react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

citrixInspector

CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...

Google-api-key-scanner

Overview A Python tool for testing Google Maps API keys against 21 different Google API endpoints to check which services are exposed and vulnerable. !IMPORTANT 🎥 For a complete walkthrough of the tool, watch the demo video here: https://youtu.be/3KMUnLdlOSE. The feature shown below starts at...

CVE-2022-21661-PoC

CVE-2022-21661-PoC Un PoC en Python para CVE-2022-21661, inspirado en el PoC en Go de z92g Instalación root@kitploit: pip3 install -r requirements.txt Uso root@kitploit: usage: main.py -h -u URL -f FILE Identify CEV-2022-21661 in Wordpress instances. options: -h, --help show this help message and...

py-log4shellscanner

PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...

cve-2024-24919

Recon Tool Installation 1. git clone https://github.com/satchhacker/cve-2024-24919.git 2. cd cve-2024-24919 3. chmod +x cve-2024-24919.sh 4. ln -s $pwd/cve-2024-24919.sh /usr/bin/cve-2024-24919.sh To use the tool, simply run: cve-2024-24919 Usage This tool will make a curl request to the ip/domai...

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

CYBERDUDEBIVASH FortiSIEM CVE-2025-64155 Scanner Authorized high-impact tool from CYBERDUDEBIVASH ECOSYSTEM to detect CVE-2025-64155 FortiSIEM phMonitor Command Injection. Scans for open ports and vulnerable behaviors ethically. Features Port check for TCP/7900 Optional safe probe for handler...

nerve

Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Table of Contents Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usage...

log4j2burpscanner

SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusión Si el código QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...

Mega-Bot

Mega Bot ☣ Scanner & Auto Exploiter What's Mega Bot ? root@kitploit: from MegaBot import print """ Tool Scanner Tool Auto Exploiter """ About Mega Bot root@kitploit: from MegaBot import print """ +----------------------------------+----------------------------------+ 1 X4PriV8 V1 | 22 XAttacker 2...

btrpa-scan

btrpa-scan Un escáner Bluetooth Low Energy BLE con resolución avanzada de direcciones privadas resolubles RPA. Descubre dispositivos BLE cercanos, rastrea un dispositivo específico por dirección MAC o resuelve direcciones aleatorizadas por privacidad mediante una clave de resolución de identidad...

Check-vuln-CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Metasploit module PR: https://github.com/rapid7/metasploit-framework/pull/11869 In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote...

valhalla

valhalla Valhalla finds vulnerable devices on shodan, it can also scan a list of domains to find vulnerabilities. INSTALLATION git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh USAGE root@kitploit: , , |\ , |\ / . ...

CVE-2014-6271_Test

CVE-2014-6271Test CVE-2014-6271Test Obviously, this project is used to check if a server with cgi enabled is affected with CVE-2014-6271aka shellshock. Dependency Need GoogleSearchCrawler. Usage eg: root@kitploit: python exp.py -g www.google.com This will test urls collected from google search...

rdp0708scanner

rdp0708scanner This is a CVE-2019-0708 scanner wrapper for the single thread 0708Detector, it dose a safe scan on a single or list of IPs. Usage root@kitploit: python rdp0708scanner.py -t ip-address -f ip.lst -p port -x threads -v...

log4v-vuln-check

Log4JS File & Vulnerability Scanner + Local Port Bind Scanner This script is used to perform a fast check to see if your server is possibly affected by CVE-2021-44228 the log4j vulnerability. It does not provide 100% guarantee that you are not vulnerable, but it gives a hint if it is possible tha...

rdg_scanner_cve-2020-0609

Escaneo de Puertas de Enlace de Escritorio Remoto Posiblemente sin parchear CVE-2020-0609 y CVE-2020-0610 El escáner tiene 2 modos de funcionamiento: Comprobar sistemas vulnerables a CVE-2020-0609 en UDP 3391 Utiliza el código de escaneo de vulnerabilidades de...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

VMware_vCenter_CVE-2021-21972

VMwarevCenterCVE-2021-21972 VMware vCenter CVE-2021-21972 Related tools Invoke-CVE-2021-21972-Scan.ps1 This script will scan the specified target hosts and attempt to detect those that are vulnerable to VMware vCenter CVE-2021-21972. The script will execute in the following order: Create a log...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...